rjackson64840 / test-project-1106 Goto Github PK

Vulnerabilities

DepShield reports that this application's usage of io.netty:netty:3.9.5.Final results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2015-2156] Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final,...

Occurrences

io.netty:netty:3.9.5.Final is a transitive dependency introduced by the following direct dependency(s):

• com.ning\[email protected]
        └─ io.netty\[email protected]

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Component: com.fasterxml.jackson.core:jackson-databind:2.9.0
CVSS Score: 9.9
Vulnerability: [CVE-2017-15095] Deserialization of Untrusted Data

Details about the vulnerability are available on the OSS Index page for [CVE-2017-15095] Deserialization of Untrusted Data.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

Vulnerabilities

DepShield reports that this application's usage of com.ning:async-http-client:1.9.0 results in the following vulnerability(s):

• (CVSS 4.3) [CVE-2013-7398] Insufficient Verification of Data Authenticity
• (CVSS 4.3) [CVE-2013-7397] Insufficient Verification of Data Authenticity

Occurrences

com.ning:async-http-client:1.9.0 is a transitive dependency introduced by the following direct dependency(s):

• com.ning\[email protected]

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Vulnerabilities

DepShield reports that this application's usage of com.fasterxml.jackson.core:jackson-databind:2.9.0 results in the following vulnerability(s):

• (CVSS 9.9) [CVE-2017-15095] Deserialization of Untrusted Data
• (CVSS 9.9) [CVE-2018-7489] Incomplete Blacklist, Deserialization of Untrusted Data
• (CVSS 8.1) [CVE-2018-5968] Incomplete Blacklist, Deserialization of Untrusted Data

Occurrences

com.fasterxml.jackson.core:jackson-databind:2.9.0 is a transitive dependency introduced by the following direct dependency(s):

• com.fasterxml.jackson.core\[email protected]

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Component: com.fasterxml.jackson.core:jackson-databind:2.9.0
CVSS Score: 8.1
Vulnerability: [CVE-2018-5968] Incomplete Blacklist, Deserialization of Untrusted Data

Details about the vulnerability are available on the OSS Index page for [CVE-2018-5968] Incomplete Blacklist, Deserialization of Untrusted Data.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}

Component: com.fasterxml.jackson.core:jackson-databind:2.9.0
CVSS Score: 9.9
Vulnerability: [CVE-2018-7489] Incomplete Blacklist, Deserialization of Untrusted Data

Details about the vulnerability are available on the OSS Index page for [CVE-2018-7489] Incomplete Blacklist, Deserialization of Untrusted Data.

_{This is an automated GitHub Issue created by Sonatype DepShield. GitHub Apps, including DepShield, can be managed from the Developer settings of the repository administrators.}